On 6/23/21 5:18 PM, Michael Butash via PLUG-discuss wrote:
> Saw this today, talking about encryption under zfs under linux. Anyone
> using it here that can comment on experience using it yet for personal
> or at scale?
>
> https://arstechnica.com/gadgets/2021/06/a-quick-start-guide-to-openzfs-native-encryption/
> <https://arstechnica.com/gadgets/2021/06/a-quick-start-guide-to-openzfs-native-encryption/>
>
> I use a combination of mdraid+luks+lvm+ext4/jfs, and would really love
> for this to be one thing, ala ZFS or BTRFS. Yes I could google my arse
> off to look, but looking for some trusted opinion here.
I've used ZFS and BTRFS under Linux, though I haven't tried native ZFS
encryption yet. I have used both ZFS and BTRFS under LUKS encryption too.
Both BTRFS and ZFS work so much nicer than mdraid when it comes to
spanning across multiple disks (though beware that BTRFS still isn't
production safe for RAID5/RAID6).
If you want to use a multi-disk storage array, ZFS and BTRFS are both
superior options to MDRAID.
However ZFS is just straight better and easier to maintain than BTRFS,
especially now that native encryption is a thing (something BTRFS sorely
lacks).
Here is my disk topology for my 4 disk RAID10 setup under BTRFS.
Disk 1 - LUKS - Btrfs --\ /--Btrfs subvolume
| |
Disk 2 - LUKS - Btrfs --| |--Btrfs subvolume
|--- Btrfs volume --|
Disk 3 - LUKS - Btrfs --| |--Btrfs subvolume
| |
Disk 4 - LUKS - Btrfs --/ \--Btrfs subvolume
To be honest, it is a pain in the arse to mount an encrypted BTRFS
volume this way. You need to unencrypt all four drives first, and then
you need to mount it. But at least once its mounted, the subvolumes are
already set up.
If I need to replace a drive (and I've had to replace drives) it is also
a pain in the arse due to having to deal with both Luks and BTRFS.
Encrypted ZFS would simplify this setup enormously.
When I need to replace my drives, I will be switching from BTRFS to ZFS.
-Matt
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
https://lists.phxlinux.org/mailman/listinfo/plug-discuss
(text/plain)